Beeton, Ontario · Open to senior security roles
Senior DevSecOps Engineer
I've spent 15+ years building infrastructure that stays up, stays secure, and stays affordable. My focus now is on the intersection of DevOps and security: pipelines that are hardened by design, observability that surfaces signal instead of noise, and CISSP rigour brought to day-to-day engineering.
Brought security into the deployment lifecycle without slowing it down by hardening pipelines, tuning alert telemetry, and mentoring teams on secure infrastructure patterns. Supported ServiceNow integration and scripting with CI/CD tooling.
Built cost-effective, scalable infrastructure on AWS, Azure, and OpenStack. Owned the path from continuous integration to reliable continuous deployment.
Cut my teeth on mixed Unix, Linux, and Windows environments, including IBM AIX, WebSphere, and early IBM security tooling (Access Manager, Identity Manager), including SRE practices such as observability and MTTR reduction.
My career started building IBM-specific lab environments while working in sales and marketing, which is also where I first learned to love Unix. From there the work shifted through WebSphere administration, then into IBM's security products (Access Manager, Identity Manager), and eventually into the DevOps discipline of treating infrastructure as code.
Log management and analytics has been a constant thread. Getting clustering and load balancing right isn't just an infrastructure problem. For security teams, it's the difference between actionable signal and ignored alerts. That's the lens I bring into DevSecOps work.
A working list, not a wall of logos. Depth varies; happy to talk specifics.
Secure CI/CD platform that embeds compliance guardrails, security scanning, and policy enforcement into delivery pipelines.
Multi-tenant SaaS CRM with multi-tier RBAC, secure authentication (email + Google OAuth), and controlled document handling on a React + Firebase stack.
OS-level scanner that inspects files, permissions, and content to surface security and stability risks. In production it was used to audit server certificates (permissions, expiry, and related configuration) and flag inconsistencies in encrypted inter-service communication across environments.
Pre-machine-learning system for identifying and associating data through cardinal keys (for example, application-specific unique identifiers). It enabled reliable linking and annotation of records, reduced duplication, and provided a scalable association layer that existing large-scale ERP platforms could not deliver natively.
The quickest way to reach me is email or LinkedIn. I reply to everything that isn't recruiter spam.